Kritik CVSS 9.8
CVE-2026-5935: Total Storage Service Console: işletim sistemi komut enjeksiyonu
Açıklama (NVD)
IBM Total Storage Service Console (TSSC) / TS4500 IMC 9.2, 9.3, 9.4, 9.5, 9.6 TSSC/IMC could allow an unauthenticated user to execute arbitrary commands with normal user privileges on the system due to improper validation of user supplied input.
Özet bilgiler
- Ürün
- Ibm Total Storage Service Console
- CVSS v3.1
- 9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,34 (yüzdelik 28)
- CWE
- CWE-78
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| ibm-total-storage-service-console | 9.2 | 9.2 | — |
| ibm-total-storage-service-console | 9.3 | 9.3 | — |
| ibm-total-storage-service-console | 9.4 | 9.4 | — |
| ibm-total-storage-service-console | 9.5 | 9.5 | — |
| ibm-total-storage-service-console | 9.6 | 9.6 | — |
| ibm-ts4500-imc | 9.2 | 9.2 | — |
| ibm-ts4500-imc | 9.3 | 9.3 | — |
| ibm-ts4500-imc | 9.4 | 9.4 | — |
| ibm-ts4500-imc | 9.5 | 9.5 | — |
| ibm-ts4500-imc | 9.6 | 9.6 | — |